< 3.2.7
3.2.7
Mibew Messenger before 3.2.7 allows XSS via a crafted user name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.